General

  • Target

    0d1549d4f444f0dc08ae65a62a8d79cf53e3b112fdb4fb01fc0bb14c4a0104c4N.exe

  • Size

    254KB

  • Sample

    241128-zbmpfazka1

  • MD5

    8998bde874fb3f70d4a85e75d73307a0

  • SHA1

    736cf3ce54743948e11b34c8d03a8f7d9b0df1db

  • SHA256

    0d1549d4f444f0dc08ae65a62a8d79cf53e3b112fdb4fb01fc0bb14c4a0104c4

  • SHA512

    2561c4dc5f160ccb13106ccc429548b8a1f55817c6fc789f5635b4ea6a9850263d4d03154e5f1ee8b0baaa58590daf7f3ddce3c7cb83b523737d21123c3b09dd

  • SSDEEP

    3072:9B+Xhpk9KoCfzSz4RcKxm8ALazIG3f4zezLBk1qEHBAnpK37nXC8T0u3Q7XdPsHS:LQKC04lLsqzNk1S8xodPSWMP9kdp

Score
10/10

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

doekdesktop-31952.portmap.host:31952

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      0d1549d4f444f0dc08ae65a62a8d79cf53e3b112fdb4fb01fc0bb14c4a0104c4N.exe

    • Size

      254KB

    • MD5

      8998bde874fb3f70d4a85e75d73307a0

    • SHA1

      736cf3ce54743948e11b34c8d03a8f7d9b0df1db

    • SHA256

      0d1549d4f444f0dc08ae65a62a8d79cf53e3b112fdb4fb01fc0bb14c4a0104c4

    • SHA512

      2561c4dc5f160ccb13106ccc429548b8a1f55817c6fc789f5635b4ea6a9850263d4d03154e5f1ee8b0baaa58590daf7f3ddce3c7cb83b523737d21123c3b09dd

    • SSDEEP

      3072:9B+Xhpk9KoCfzSz4RcKxm8ALazIG3f4zezLBk1qEHBAnpK37nXC8T0u3Q7XdPsHS:LQKC04lLsqzNk1S8xodPSWMP9kdp

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks